GitLab

Before, qtaguid would rely on netdev (up/down) callbacks to read out the
dev rx/tx stats.
Now it uses (raw) PREROUTING and (mangle) POSTROUTING iptable hooks.
We use mangle on the out path because nat is not available in ipv6.
The NatController only masquerades in nat POSTROUTING so we don't count
traffic that might get dropped.


Bug: 5444089
Change-Id: I997b8b3c81264a545f1f575baaf0445c0afc8f72

The initial idletimer support required using NETLINK_IDLETIMER
netlink socket type.
Instead we now just re-use the existing KOBJECT_UEVENT socket.

Change-Id: I951f2f29182c7cf7f29a054a0eabc88dc25f6d1f

Some commands are run to be able to recover after failures.
Those cleanup commands are generally allowed to fail.
But the lower level system commands would log an error.
Now that error is hidden if nobody will care about the result.
A "#define LOG_NDEBUG 0" will show those failing commands.

Removed leftover LOG_NDEBUG in CommandListener.

Bug: 6377175
Change-Id: I1205fb077f7d0496969bd2a0b5da42025bc5a8dc

iptables top-level chain updates should happen within CommandListener()
when it invokes the various modules' setupIptablesHooks().
And remove the extra DROP rule.

Change-Id: I33d2cfbd5444516f855ff85152c472352944cc77

They sometimes contain spaces so a space-delimited response requires more care.

bug: 6353048
Change-Id: I84d5cc156bf4d9f1419b7202e9aa00ddb7209b2f

* modified iptables users to work in controller specific custom chains.
 - each controller only works withing his own custom chains and not the
  top level ones (INPUT, OUTPUT, FORWARD, POSTROUTING,...)
 - CommandListener now invokes setupIptablesHooks() for each controller
   once. That is the only time they are allowed to access the top-level
   chains.

* Added idletimer controller.
  From https://android-git.corp.google.com/g/#/c/180769/2


 - supported commands
   . ndc idletimer enable
   . ndc idletimer add <iface> <timeout>
   . ndc idletimer remove <iface> <timeout_used_during_add>
 There is a framework change elsewhere that receives netlink messages.
Signed-off-by: Ashish Sharma <ashishsharma@google.com>
Signed-off-by: JP Abgrall <jpa@google.com>
Change-Id: Ia57450c09166ce20f21d1e3b49047ef1e98f2a3d

Bug: 6344821
Change-Id: Ic8cd235a1cbdd848ff839f6f0f03161de2090751

Uses extern/mdnsresponder and communicate with the framework via nativedaemonconnector.

Change-Id: I5c090528197afa090836d7cb5bf75dfba33ff11c

Change-Id: Ifda5b8ecf68533eea42b133dbe0a581b4401ab11

* commit '19ac8238':

* commit '99c65114':

Change-Id: I6cf64c289005dccb3d60c972686b7c335aa015a4

* commit 'd7a9ff6d':

* commit '17654593':

Change-Id: If53997c291c7c51332b57f572fbbfc70f7527166

Change-Id: Id2b43001d95259fbaf25108bf95dfae3802b79bf
Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>

Merge "We are not reverting this CL since it was a temporary fix and we just submitted the proper one."

Revert "Do not send extra data the client is not consuming."

This reverts commit 6217272e

Bug:6141847

Ignore sigpipe in netd. This will enable us remove the temporary
changes in DnsProxyListener that we added to temporarily resolve
issue 6138617.

Change-Id: I4bc13ac0fcf9dd0e7641c2d4459b1eab0ed50f2a

Bug:6138617

This is to temporarily fix a problem in netd. In case of an error do
not send extra data that the client is not expecting. This causes a
netd crash.

Change-Id: Iadb375e326577857034c2a7d2e962e4242d4735f

Change-Id: I81ec40b8dd560eb9b6430eafc05d5e7714e0f042
Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>

* commit 'e1176866':

* commit 'e2f132b7':
  netd: do check on command, not buffer.

* commit '88ec4ed2':

* commit '19d7b786':
  netd: do check on command, not buffer.

* commit '1babab9f':
  netd: do check on command, not buffer.

* commit '1babab9f':
  netd: do check on command, not buffer.

* commit '1babab9f':
  netd: do check on command, not buffer.

Bug: 6132094
Change-Id: I76aef21b07c07db76bbc6587ae732b1ceb4488ce

Bug: 6132094
Change-Id: Icb3b0d0b2a0fd795c05162afc8791729bfa5d075